Lucene search

K
ibmIBM39A63A0BDC9DF103E97272418A38566CD99A1FAB44D09B287CF89A4977B1EA6C
HistoryJun 17, 2018 - 10:33 p.m.

Security Bulletin: A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics (CVE-2017-15047)

2018-06-1722:33:37
www.ibm.com
10

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Summary

A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics (CVE-2017-15047)

Vulnerability Details

Title****
Security Bulletin: A security vulnerability has been identified in Redis shipped with IBM Cloud Schematics (CVE-2017-15047)

Summary

Redis is used as a component of IBM Cloud Schematics. Information about a security vulnerability affecting Redis** **has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin CVE-2017-15047(<https://nvd.nist.gov/vuln/detail/CVE-2017-15047&gt;) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s) Affected Supporting Product and Version
IBM Cloud Schematics

SaaS

| Redis

Redis version 3.0.7

Remediation/Fixes

Refer to the following security bulletins for vulnerability details and information about fixes addressed by Redis which is/are shipped with IBM Cloud Schematics.

<https://nvd.nist.gov/vuln/detail/CVE-2017-15047&gt;

IBM Cloud Schematics will be upgraded to the latest Redis version 30 days after a fixed version is available as a service on the IBM Cloud (Compose for Redis).

Migration/Workarounds

- no migration required
- no workarounds available

Related Information (DCF will auto include the first 2 links below)

_IBM Secure Engineering Web Portal __
_IBM Product Security Incident Response Blog

CPENameOperatorVersion
ibm cloud schematicseqany

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Related for 39A63A0BDC9DF103E97272418A38566CD99A1FAB44D09B287CF89A4977B1EA6C